last executing test programs: 26.166732912s ago: executing program 1 (id=1665): ioperm(0x2, 0x7ff, 0x8) readv(0xffffffffffffffff, 0x0, 0x0) 25.547537652s ago: executing program 1 (id=1667): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000540)=ANY=[], 0xa8) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000980)=ANY=[@ANYBLOB='h'], 0x168) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) statfs(&(0x7f0000000300)='./file0\x00', 0x0) 9.09713701s ago: executing program 4 (id=1722): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000080)=0xfffff8d4, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x5c}, {0x6}]}) 8.133047018s ago: executing program 1 (id=1668): r0 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$ax25(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x7fffffff}}) 7.97992864s ago: executing program 1 (id=1727): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000f40)={[{@noload}, {@mblk_io_submit}, {@lazytime}, {@nogrpid}, {@block_validity}, {@user_xattr}]}, 0x3, 0x449, &(0x7f0000000740)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) 7.746593469s ago: executing program 1 (id=1728): sendmsg$inet(0xffffffffffffffff, 0x0, 0x4dc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000400)={@val={0x8, 0x800}, @val={0x1}, @ipv4=@igmp={{0x5, 0x4, 0x1, 0x16, 0x1c, 0x64, 0x0, 0x9, 0x2, 0x0, @private=0xa010101, @local}, {0x1f, 0x4, 0x0, @empty}}}, 0x2a) 6.788987977s ago: executing program 4 (id=1731): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r3, 0x0, 0x168) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) statfs(&(0x7f0000000300)='./file0\x00', 0x0) 6.422146398s ago: executing program 4 (id=1733): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x72, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_MOVE(0x1d, 0x0, 0xfffffffffffffffe, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) getpid() prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x1000000, 0x0) 4.403910082s ago: executing program 4 (id=1737): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c000200080003003688"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0xffffffe2, {0x0, 0x0, 0xe403, r4, 0x3, 0x715cb}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0xe64b}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) 4.403537862s ago: executing program 2 (id=1738): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000003c0)=ANY=[@ANYBLOB="706172743d3078300002a27f9edc6b44900000c63d5f852c6769643d", @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYRESOCT, @ANYRES8, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29ab72f4a2f73b811c7fd9bae7ecd520839bd791f81b6637f549a77ac6cb621635f9c08b2615964a3c43b727df50d049dc760465dea7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b021249834326e80399ca072639251325e38177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8964f99a04195ad43adb611", @ANYRES16, @ANYBLOB="4599"], 0x1, 0x701, &(0x7f00000009c0)="$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") socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f40)=@ipv6_newaddrlabel={0x24, 0x48, 0x3, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[0x0]) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x48}, {0x0, 0x2}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000001980)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0xc5}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.357739415s ago: executing program 4 (id=1739): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) 4.17231871s ago: executing program 1 (id=1742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3}, 0x10) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x72, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r4, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000000c0)="8252", 0x2}, {&(0x7f00000002c0)="df91", 0x2}], 0x2}}], 0x1, 0x4000c000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004280)={0x2020}, 0x2020) preadv2(r5, &(0x7f0000000180)=[{&(0x7f0000000080)=""/67, 0x43}], 0x1, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000300), 0x4, 0x0, 0x0, 0xfffffffffffffdfd) epoll_create1(0x0) epoll_create(0x1ff) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) 3.395846363s ago: executing program 2 (id=1745): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x3810082, &(0x7f0000000800)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x401}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@gid_forget}, {@gid_ignore}, {@gid}, {@longad}]}, 0x1, 0xc32, &(0x7f0000001a40)="$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") 2.974752298s ago: executing program 2 (id=1746): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/234) 2.755830415s ago: executing program 2 (id=1748): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="d74d4156a221296a665e18aa4c7a0acfd92aa9fb57dbd7cb2c9a9d1cd00b40d432e82bebeb0c176990de4eceb7f41b16a0543f95240979fdcd68b7db60965ca8232034538be7d93df76fead7bddf574c70e3a9724a6614c371b405d4a8126f90990422f978e5e7eb2eb9448d419377df69a9d9635429f06fabcb6655d5dda77848c25b97f87151d9c21709000257580be9edd4f3041fcf2473042c8f55c0aa71ef035f5b89b0d2e4b322ec9787a321450d1c164e8cfaacca90a9773e6b877e38e4237eb5da067a85c2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x0, 0x1}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000100)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x4, @private1={0xfc, 0x1, '\x00', 0x2}, 0xffffffff}, 0x1c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r7, &(0x7f0000000600)='m', 0x1, 0x0, 0x0) 2.45438167s ago: executing program 3 (id=1751): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000000000000000000000000950000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r5], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x192}}, 0x20}}, 0x0) 2.45395927s ago: executing program 0 (id=1752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x54, r2, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x54}}, 0x0) 1.903788645s ago: executing program 0 (id=1753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r2}, 0x10) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x72, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r3, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000000c0)="8252", 0x2}, {&(0x7f00000002c0)="df91", 0x2}], 0x2}}], 0x1, 0x4000c000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004280)={0x2020}, 0x2020) preadv2(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/67, 0x43}], 0x1, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000300), 0x4, 0x0, 0x0, 0xfffffffffffffdfd) epoll_create1(0x0) epoll_create(0x1ff) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) 1.832818491s ago: executing program 2 (id=1754): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000003c0)=ANY=[@ANYBLOB="706172743d3078300002a27f9edc6b44900000c63d5f852c6769643d", @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYRESOCT, @ANYRES8, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29ab72f4a2f73b811c7fd9bae7ecd520839bd791f81b6637f549a77ac6cb621635f9c08b2615964a3c43b727df50d049dc760465dea7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b021249834326e80399ca072639251325e38177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8964f99a04195ad43adb611", @ANYRES16, @ANYBLOB="4599"], 0x1, 0x701, &(0x7f00000009c0)="$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") socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f40)=@ipv6_newaddrlabel={0x24, 0x48, 0x3, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[0x0]) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x48}, {0x0, 0x2}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000001980)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0xc5}) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.784146465s ago: executing program 3 (id=1755): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0xa, 0x0, 0x0) 1.651878965s ago: executing program 3 (id=1756): syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)}, &(0x7f0000000100)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = dup2(r2, r1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000003c0)={r4, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000340)=0x90) r6 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r6}], 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89fd, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x20000000, 0x0, @cisco=0x0}}) 1.560864823s ago: executing program 3 (id=1757): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa08, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) 1.029545526s ago: executing program 0 (id=1758): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) iopl(0x3) 948.019732ms ago: executing program 0 (id=1759): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'geneve0\x00', &(0x7f0000000680)=@ethtool_drvinfo={0x3, "375ab1cbb3f7c6eca020449b335ddf61f5f42c0ced358fa80d843fb49c2cb669", "ea29430930b2eef11cfb2282cfa37438f0e8128dcae0136a4dc9858bc2418b08", "1bae5bb9dae39d38ba77fefcee81b2020dfa1a382644b1800faa001d9b787419", "3c7295149203e18ae4cef26446e5afdfcf746b75a333fc2df4eba7ca666f2b6a", "7b145332ade510f186511a20def495e3618bf549ed4e944fdf92b6709c576294", "244b010e411c09e15a2437ba"}}) 937.656363ms ago: executing program 2 (id=1760): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x24) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40800) write$tun(r0, &(0x7f0000000500)={@void, @void, @eth={@broadcast, @random="83d40100000e", @val, {@ipv6={0x86dd, @udp={0x0, 0x6, 'MF(', 0x10, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}}, 0x4e) 907.176876ms ago: executing program 4 (id=1761): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file1\x00', 0x1600008, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x3, 0x632, &(0x7f0000001840)="$eJzs3UtsG2kdAPD/OI4TB9TN7qa7Ba1EtJUWRESbh7IQLpSHUA4rtFoOnKPWbay6aZW4KK0QCi9x4MKh4lwOuXFC6j1SOcMF9ZpjJVAvPaDcjGY8dpy386qd7e8Xjb/v8zfzzX/+9jzsyJoA3lrzE1HciCTmJz5bTdub6zO1zfWZoby7FhFpvRBRbBaRLEUkz5vdN9KHr6VP5vMnB63nSXXuixevN182W8XWwkkprQ0fvNxRmguu5VOMR8RAXu412O2oO8a7eeB4+/nvn/YPshlous1XW4mDXmvssXacxU+83wL9I2meN/cYjRjJztDN64DIjw6FNxvd2TvWUQ4AAAAuqHe2Ymut0Wj0Og4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4SPL7/yf5VGjVxyNp3f+/1DF7qYehnomNXgcAAAAAAAAAACfSGOhsfWMrtmI1LrV7k+x//h9njbHs8SvxMFaiEstxLVZjIepRj+WYiojRjoFKqwv1+vJUF0tO77vk9LluNAAAAAAAAAB82f025rf//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP0giRhoFtk01qqPRqEYEcMRUUrnW4v4V6t+kW30OgAAAAB4A97Ziq1YjUutdiPJPvN/kH3uH46HsRT1qEY9alGJW9l3Ac1P/YXN9Zna5vrMvXTaO+5f/tfIdBlGNmI0v3vYf81XsjnKcTuq2TPX4mbcj1q5c5QrrXj2j+s3r9Kxf5DrMrJbeZlu+Z/zsj+MZhkZbGdkMo8tzeO7h2fih69OtaapKLS/+Rk7h5yP5GWyq+y93ZmYjkKW79QHh2ci4pvP/vaLxdrS3cXbKxP9s0kn1MxEo9HMxFDWamXiw7cqE5PZtl9ut+fjp/HzmIjx+DyWoxq/jIWoRyXG4ydZbSF/P6ePo7syVdg59I0drc+PiqSUvy7No+jxYvo4W/ZSVONncT9uRSU+zf6mYyq+G7MxG3Mdr/DlLvb6wvH2+qvfyivpIf2Pedkf0ry+25HXzmPuaNbX+cx2lt47+2Nj8et5JV3H7yLix2e4naezOxPpWeLZV5t97x+eib9m1wkrtaW7y4sLD7pc3yd5me5Hf+irs0T6fnkvfbGy1s53R9r3/r59U1nfWLuvsKfvcrvvqD21lF/D7R1pOuv7cN++mazvSkffnuut9vUQAH1s5NsjpfJ/yv8sPy3/vrxY/mz4R0PfG/qoFIP/GPx+cXLgk8JHyd/jafx6+/M/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwciuPHt9dqNUqy0dWkuzm/xFdzdxRad3O6fCZk/xGPscZWaVWqwxHX4RxrErt3xEdzyS9jqcfKkP99ubv7XEJOH/X6/ceXF959Pg71XsLdyp3KkuDs7Nzk3Ozn85cv12tDUT6WJnsdZTAedg+6fc6EgAAAAAAAAAAAKBbh/8MYDCf63Q/J+jxJgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX3PxEFDciianJa5Npe3N9ppZOrfr2nMWIKERE8quI5HnEjWhOMdoxXHLQep5U57548Xrz5fZYxdb8hcOW685aPsV4RAzk5VmNd/PU4yXtLUwTdrV0uuDgzPw/AAD//4oVCL4=") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000b00)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000080)='./file1\x00', 0x0) 632.001828ms ago: executing program 0 (id=1762): r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) 614.46924ms ago: executing program 0 (id=1763): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0xffffffffffffffff, &(0x7f0000001080), 0x4001) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) timer_create(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0xffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r2, &(0x7f0000000100)="b4", 0x1, 0x40088d0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b574e69620bf85edacab3"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x5421, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xb, 0xf989, "bfbef7df9abefd"}, @mptcp=@ack={0x1e, 0xc, 0x1f, 0x4, "74c01ff5133cf07e"}]}}}}}}}}, 0x0) 595.343891ms ago: executing program 3 (id=1764): r0 = syz_io_uring_setup(0x3c, &(0x7f0000000480)={0x0, 0x1e7f, 0x10100, 0x1, 0x143}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1765): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f0000000100)=ANY=[], 0x1, 0x6af, &(0x7f0000001300)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x599, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r0, 0x0, 0x1ba8847c99}, 0x38) kernel console output (not intermixed with test programs): : batadv_slave_0 [ 316.378209][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.425006][ T9116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.474004][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 316.491488][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 316.596556][ T1228] device hsr_slave_0 left promiscuous mode [ 316.630798][ T1228] device hsr_slave_1 left promiscuous mode [ 316.638659][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.661486][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.689860][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.699557][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.707298][ T1228] device bridge_slave_1 left promiscuous mode [ 316.718158][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.742744][ T1228] device bridge_slave_0 left promiscuous mode [ 316.762042][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.891720][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.898048][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.910355][ T1228] device veth1_macvtap left promiscuous mode [ 316.935788][ T1228] device veth0_macvtap left promiscuous mode [ 316.969995][ T1228] device veth1_vlan left promiscuous mode [ 316.975832][ T1228] device veth0_vlan left promiscuous mode [ 318.378104][ T1228] team0 (unregistering): Port device team_slave_1 removed [ 318.405227][ T1228] team0 (unregistering): Port device team_slave_0 removed [ 318.417608][ T1228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.435477][ T1228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.531778][ T1228] bond0 (unregistering): Released all slaves [ 319.137248][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.147814][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.158312][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.168784][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.178672][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.189127][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.198964][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.209401][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.221018][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.231634][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.242603][ T9116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.258817][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 319.278380][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 319.316357][ T9116] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.325831][ T9116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.353404][ T9116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.388170][ T9116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.428677][ T9364] loop3: detected capacity change from 0 to 2048 [ 320.492702][ T9364] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 320.519452][ T9364] UDF-fs: Scanning with blocksize 512 failed [ 320.550518][ T9364] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 320.607563][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1534'. [ 320.624725][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.735476][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.768761][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 321.053493][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.264859][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.358388][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 321.437004][ T25] audit: type=1326 audit(1723540187.864:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.2.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9fbf99f9 code=0x7ffc0000 [ 321.545097][ T25] audit: type=1326 audit(1723540187.864:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.2.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c9fbf8390 code=0x7ffc0000 [ 321.598526][ T9410] loop1: detected capacity change from 0 to 512 [ 321.756363][ T25] audit: type=1326 audit(1723540187.864:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.2.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c9fbf95fb code=0x7ffc0000 [ 323.566631][ T3625] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 323.582601][ T25] audit: type=1326 audit(1723540187.864:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.2.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c9fbf95fb code=0x7ffc0000 [ 324.118650][ T25] audit: type=1326 audit(1723540187.914:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.2.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c9fbf95fb code=0x7ffc0000 [ 324.198240][ T25] audit: type=1326 audit(1723540187.914:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.2.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c9fbf95fb code=0x7ffc0000 [ 324.222445][ T25] audit: type=1326 audit(1723540190.044:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.2.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c9fbf95fb code=0x7ffc0000 [ 324.244821][ T9410] EXT4-fs (loop1): Ignoring removed orlov option [ 324.273326][ T9410] EXT4-fs (loop1): 1 truncate cleaned up [ 324.280759][ T9410] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,quota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,orlov,i_version,data_err=ignore,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 324.319519][ T25] audit: type=1326 audit(1723540190.624:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.2.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c9fbf95fb code=0x7ffc0000 [ 324.342486][ T9410] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #12: comm syz.1.1441: No space for directory leaf checksum. Please run e2fsck -D. [ 324.358680][ T9410] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #12: comm syz.1.1441: checksumming directory block 1 [ 324.375988][ T9410] EXT4-fs (loop1): Remounting filesystem read-only [ 324.395450][ T9116] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 324.418083][ T25] audit: type=1326 audit(1723540190.854:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.2.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c9fbf95fb code=0x7ffc0000 [ 324.442847][ T9116] EXT4-fs error (device loop1): ext4_lookup:1855: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature. [ 324.469363][ T3625] usb 3-1: device descriptor read/all, error -71 [ 324.502518][ T9116] EXT4-fs error (device loop1): ext4_lookup:1855: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature. [ 324.758185][ T9429] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1545'. [ 325.676644][ T9446] loop2: detected capacity change from 0 to 512 [ 325.771499][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1552'. [ 326.218830][ T9446] EXT4-fs (loop2): Ignoring removed orlov option [ 326.512320][ T9446] EXT4-fs (loop2): 1 truncate cleaned up [ 326.518143][ T9446] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,quota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,orlov,i_version,data_err=ignore,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 326.631904][ T9446] EXT4-fs warning (device loop2): ext4_dirblock_csum_set:426: inode #12: comm syz.2.1553: No space for directory leaf checksum. Please run e2fsck -D. [ 326.690441][ T9446] EXT4-fs error (device loop2): ext4_free_branches:1043: inode #13: block 234881024: comm syz.2.1553: Read failure [ 326.759309][ T9446] EXT4-fs (loop2): Remounting filesystem read-only [ 326.781294][ T9439] chnl_net:caif_netlink_parms(): no params data found [ 326.819420][ T3625] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 326.836284][ T9462] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 326.893155][ T8709] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /38/file0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 326.951431][ T8709] EXT4-fs error (device loop2): ext4_lookup:1855: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature. [ 327.014557][ T9439] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.017450][ T8709] EXT4-fs error (device loop2): ext4_lookup:1855: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature. [ 327.021758][ T9439] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.046852][ T9439] device bridge_slave_0 entered promiscuous mode [ 327.056299][ T9439] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.065190][ T9439] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.074086][ T9439] device bridge_slave_1 entered promiscuous mode [ 327.143832][ T9439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.229476][ T3625] usb 5-1: unable to get BOS descriptor or descriptor too short [ 327.239301][ T9439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.319520][ T3625] usb 5-1: config 1 interface 0 altsetting 128 bulk endpoint 0x1 has invalid maxpacket 1024 [ 327.320329][ T9439] team0: Port device team_slave_0 added [ 327.336283][ T3625] usb 5-1: config 1 interface 0 has no altsetting 0 [ 327.366063][ T7] kernel write not supported for file /vcsa1 (pid: 7 comm: kworker/0:0) [ 327.367421][ T9439] team0: Port device team_slave_1 added [ 327.382071][ T8949] Bluetooth: hci9: command 0x0406 tx timeout [ 327.441280][ T9439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.463919][ T9439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.516794][ T9439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.519417][ T3625] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 327.548121][ T9439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.558909][ T9439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.584945][ T3625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.592270][ T9439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.607891][ T3625] usb 5-1: Product: syz [ 327.628627][ T8959] Bluetooth: hci3: command 0x0409 tx timeout [ 327.635416][ T3625] usb 5-1: Manufacturer: syz [ 327.649205][ T3625] usb 5-1: SerialNumber: syz [ 327.679491][ T9453] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 327.806395][ T9485] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 327.819932][ T9439] device hsr_slave_0 entered promiscuous mode [ 327.846663][ T9439] device hsr_slave_1 entered promiscuous mode [ 327.866648][ T9439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.880953][ T9439] Cannot create hsr debugfs directory [ 328.125939][ T3625] usb 5-1: USB disconnect, device number 21 [ 328.220936][ T9439] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.284200][ T1228] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.306616][ T9439] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.376168][ T1228] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.396591][ T9439] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.443386][ T1228] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.469845][ T9498] loop3: detected capacity change from 0 to 512 [ 328.480731][ T9439] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.516504][ T1228] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.557758][ T9488] chnl_net:caif_netlink_parms(): no params data found [ 328.581996][ T9498] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 8 [ 328.731531][ T9488] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.740613][ T9488] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.748574][ T9488] device bridge_slave_0 entered promiscuous mode [ 328.893747][ T9488] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.913276][ T9488] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.140430][ T9488] device bridge_slave_1 entered promiscuous mode [ 330.213917][ T8950] Bluetooth: hci3: command 0x041b tx timeout [ 330.220734][ T8950] Bluetooth: hci2: command 0x0409 tx timeout [ 330.361338][ T9488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.393262][ T9488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.496077][ T9488] team0: Port device team_slave_0 added [ 330.547867][ T9439] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 330.589427][ T8959] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 330.660045][ T9488] team0: Port device team_slave_1 added [ 330.674341][ T9439] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 330.783195][ T9439] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 330.800770][ T9439] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 330.856631][ T9488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.867005][ T9488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.896149][ T9488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.031216][ T9488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.389390][ T8959] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 331.413232][ T8959] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 331.419393][ T9488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.426261][ T8959] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 331.451952][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.477923][ T8959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.494581][ T8959] usb 5-1: config 0 descriptor?? [ 331.519710][ T9526] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 331.541332][ T8959] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 331.564047][ T9488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.691189][ T25] audit: type=1326 audit(1723540198.124:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9569 comm="syz.0.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b81ab89f9 code=0x7ffc0000 [ 331.720040][ T25] audit: type=1326 audit(1723540198.124:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9569 comm="syz.0.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b81ab89f9 code=0x7ffc0000 [ 331.742528][ T25] audit: type=1326 audit(1723540198.154:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9569 comm="syz.0.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f5b81ab89f9 code=0x7ffc0000 [ 331.808187][ T25] audit: type=1326 audit(1723540198.154:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9569 comm="syz.0.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b81ab89f9 code=0x7ffc0000 [ 331.833389][ T25] audit: type=1326 audit(1723540198.154:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9569 comm="syz.0.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b81ab89f9 code=0x7ffc0000 [ 331.856742][ T25] audit: type=1326 audit(1723540198.154:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9569 comm="syz.0.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f5b81ab89f9 code=0x7ffc0000 [ 332.006048][ T9439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.615609][ T25] audit: type=1326 audit(1723540198.154:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9569 comm="syz.0.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b81ab89f9 code=0x7ffc0000 [ 334.234399][ T8949] Bluetooth: hci2: command 0x041b tx timeout [ 334.244155][ T8949] Bluetooth: hci3: command 0x040f tx timeout [ 334.260615][ T25] audit: type=1326 audit(1723540198.154:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9569 comm="syz.0.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b81ab89f9 code=0x7ffc0000 [ 334.282929][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.307042][ T8959] usb 5-1: USB disconnect, device number 22 [ 334.351002][ T9488] device hsr_slave_0 entered promiscuous mode [ 334.370141][ T9585] loop3: detected capacity change from 0 to 256 [ 334.394153][ T9488] device hsr_slave_1 entered promiscuous mode [ 334.412958][ T9488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.434658][ T9488] Cannot create hsr debugfs directory [ 335.479596][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.487267][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.556003][ T9604] loop4: detected capacity change from 0 to 1024 [ 335.632905][ T9439] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.671641][ T9604] hfsplus: extend alloc file! (8192,65536,366) [ 335.792970][ T9612] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 335.819531][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.832461][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.846977][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.854093][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.876226][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.897913][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.915789][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.922922][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.985013][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.996106][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 336.018725][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 336.039835][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 336.066542][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 336.086921][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 336.111226][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 336.204245][ T9608] loop3: detected capacity change from 0 to 32768 [ 336.229475][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 336.247685][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 336.284869][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.321196][ T8950] Bluetooth: hci2: command 0x040f tx timeout [ 336.326830][ T9439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.369885][ T8959] Bluetooth: hci3: command 0x0419 tx timeout [ 336.408899][ T9439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 336.428862][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 336.457689][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.718355][ T25] audit: type=1326 audit(1723540203.144:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.3.1599" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e100af9f9 code=0x0 [ 336.802565][ T3575] Bluetooth: hci9: unknown advertising packet type: 0x47 [ 336.802618][ T3575] Bluetooth: hci9: unknown advertising packet type: 0x38 [ 336.810138][ T3575] Bluetooth: hci9: unknown advertising packet type: 0xb9 [ 336.843896][ T3575] Bluetooth: hci9: unknown advertising packet type: 0xce [ 336.851457][ T3575] Bluetooth: hci9: unknown advertising packet type: 0xe2 [ 336.861058][ T3575] Bluetooth: hci9: unknown advertising packet type: 0x9c [ 336.868414][ T3575] Bluetooth: hci9: unknown advertising packet type: 0x97 [ 337.027059][ T9488] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 337.103549][ T9488] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 337.132985][ T9639] loop4: detected capacity change from 0 to 512 [ 337.169643][ T9488] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 337.194026][ T9488] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 337.284709][ T9639] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 337.325333][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 337.343921][ T9639] System zones: 1-12 [ 337.352031][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 337.389750][ T9639] EXT4-fs error (device loop4): dx_probe:822: inode #2: comm syz.4.1607: Directory hole found for htree index block [ 337.408325][ T9439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.482691][ T9639] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 337.525585][ T9639] EXT4-fs error (device loop4): dx_probe:822: inode #2: comm syz.4.1607: Directory hole found for htree index block [ 337.572093][ T9639] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 337.594027][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 337.612869][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 337.629293][ T9639] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota=",,errors=continue. Quota mode: writeback. [ 337.704363][ T9439] device veth0_vlan entered promiscuous mode [ 337.722592][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 337.731375][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 337.741197][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 337.748874][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 337.762554][ T9439] device veth1_vlan entered promiscuous mode [ 337.775383][ T9488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.838189][ T9488] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.951897][ T1228] device hsr_slave_0 left promiscuous mode [ 337.960377][ T1228] device hsr_slave_1 left promiscuous mode [ 337.987796][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.020498][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.039759][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.057368][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.099998][ T1228] device bridge_slave_1 left promiscuous mode [ 338.106185][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.160279][ T1228] device bridge_slave_0 left promiscuous mode [ 338.166465][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.181301][ T9669] loop3: detected capacity change from 0 to 512 [ 338.206328][ T1228] device hsr_slave_0 left promiscuous mode [ 338.219686][ T9669] EXT4-fs (loop3): Ignoring removed orlov option [ 338.253028][ T1228] device hsr_slave_1 left promiscuous mode [ 338.262185][ T9669] EXT4-fs (loop3): 1 truncate cleaned up [ 338.268454][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.276497][ T9669] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,quota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,orlov,i_version,data_err=ignore,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 338.318909][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.336799][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.345086][ T9669] EXT4-fs warning (device loop3): ext4_dirblock_csum_set:426: inode #12: comm syz.3.1608: No space for directory leaf checksum. Please run e2fsck -D. [ 338.369914][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.379826][ T9669] EXT4-fs error (device loop3): ext4_free_branches:1043: inode #13: block 234881024: comm syz.3.1608: Read failure [ 338.412241][ T8949] Bluetooth: hci2: command 0x0419 tx timeout [ 338.418953][ T1228] device bridge_slave_1 left promiscuous mode [ 338.425542][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.427372][ T9669] EXT4-fs (loop3): Remounting filesystem read-only [ 338.445465][ T1228] device bridge_slave_0 left promiscuous mode [ 338.458605][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.467513][ T7885] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /87/file0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 338.505635][ T1228] device veth1_macvtap left promiscuous mode [ 338.509590][ T7885] EXT4-fs error (device loop3): ext4_lookup:1855: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature. [ 338.513330][ T1228] device veth0_macvtap left promiscuous mode [ 338.533206][ T1228] device veth1_vlan left promiscuous mode [ 338.537159][ T7885] EXT4-fs error (device loop3): ext4_lookup:1855: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature. [ 338.539004][ T1228] device veth0_vlan left promiscuous mode [ 338.574990][ T1228] device veth1_macvtap left promiscuous mode [ 338.581145][ T1228] device veth0_macvtap left promiscuous mode [ 338.587231][ T1228] device veth1_vlan left promiscuous mode [ 338.593193][ T1228] device veth0_vlan left promiscuous mode [ 338.908275][ T1228] team0 (unregistering): Port device team_slave_1 removed [ 338.926679][ T1228] team0 (unregistering): Port device team_slave_0 removed [ 338.942907][ T1228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.960619][ T1228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.030032][ T1228] bond0 (unregistering): Released all slaves [ 339.158651][ T1228] team0 (unregistering): Port device team_slave_1 removed [ 339.173116][ T1228] team0 (unregistering): Port device team_slave_0 removed [ 339.183818][ T1228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.201520][ T1228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.266324][ T1228] bond0 (unregistering): Released all slaves [ 339.340083][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 339.347651][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 339.355568][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 339.364065][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.373173][ T9665] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1610'. [ 339.383443][ T9665] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1610'. [ 339.526717][ T9439] device veth0_macvtap entered promiscuous mode [ 339.568335][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 339.590281][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 339.622589][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 339.659534][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.666621][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.706823][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 339.739026][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 339.756668][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.763783][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.811248][ T9439] device veth1_macvtap entered promiscuous mode [ 339.847158][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 339.869859][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 339.878520][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 339.924573][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 339.939410][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 339.956941][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 339.969305][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 339.977770][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 340.014280][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 340.048209][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.061615][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.078962][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.089644][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.099525][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.112605][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.122524][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.133604][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.144908][ T9439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.163933][ T9488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 340.183115][ T9488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 340.197276][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 340.206759][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 340.223332][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 340.239949][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 340.256091][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 340.274105][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.274123][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.274134][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.274146][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.274156][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.274168][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.274177][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.274189][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.275168][ T9439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.277446][ T9439] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.277477][ T9439] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.277502][ T9439] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.277527][ T9439] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.529883][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 340.551385][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 340.554303][ T25] audit: type=1800 audit(1723540206.984:2813): pid=9705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1616" name="/" dev="fuse" ino=1 res=0 errno=0 [ 340.637687][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 340.660648][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 340.668986][ T9718] loop4: detected capacity change from 0 to 512 [ 340.674437][ T9488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.740471][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.748677][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.766649][ T9718] EXT4-fs (loop4): Ignoring removed orlov option [ 340.813445][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 340.828079][ T9718] EXT4-fs (loop4): 1 truncate cleaned up [ 340.834512][ T9718] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,quota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,orlov,i_version,data_err=ignore,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 340.862604][ T7822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.898726][ T7822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.909701][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 340.918344][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 340.956137][ T9718] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:426: inode #12: comm syz.4.1621: No space for directory leaf checksum. Please run e2fsck -D. [ 340.982084][ T9718] EXT4-fs error (device loop4): ext4_free_branches:1043: inode #13: block 234881024: comm syz.4.1621: Read failure [ 341.005598][ T9488] device veth0_vlan entered promiscuous mode [ 341.010997][ T9718] EXT4-fs (loop4): Remounting filesystem read-only [ 341.019032][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 341.045976][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 341.050917][ T7887] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /74/file0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 341.066964][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 341.089741][ T7887] EXT4-fs error (device loop4): ext4_lookup:1855: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature. [ 341.112324][ T7887] EXT4-fs error (device loop4): ext4_lookup:1855: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature. [ 341.115139][ T9711] chnl_net:caif_netlink_parms(): no params data found [ 341.157350][ T9488] device veth1_vlan entered promiscuous mode [ 341.180373][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 341.188199][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 341.206984][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 341.296853][ T9488] device veth0_macvtap entered promiscuous mode [ 341.359664][ T9488] device veth1_macvtap entered promiscuous mode [ 341.371100][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 341.380575][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 341.389005][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 341.399540][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 342.392191][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 342.404582][ T8950] Bluetooth: hci1: command 0x0409 tx timeout [ 342.422552][ T9488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.444850][ T9488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.466703][ T9488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.477616][ T9488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.494799][ T9488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.508768][ T9488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.525482][ T9488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.537554][ T9488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.554127][ T9488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.568987][ T9488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.588934][ T9488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.617662][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 342.627337][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 342.645480][ T9488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.669292][ T9488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.689211][ T9488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.710400][ T9488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.727102][ T9488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.748203][ T9488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.768918][ T9488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.788211][ T9488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.798544][ T9488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.825132][ T9488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.845606][ T9488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.856379][ T9711] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.866130][ T9711] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.883997][ T9711] device bridge_slave_0 entered promiscuous mode [ 342.899057][ T9711] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.908543][ T9711] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.917411][ T9711] device bridge_slave_1 entered promiscuous mode [ 342.927261][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 342.940798][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 342.969717][ T9757] netlink: 'syz.0.1635': attribute type 10 has an invalid length. [ 342.989969][ T9757] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 343.016290][ T9757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.049733][ T9488] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.058430][ T9488] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.077110][ T9488] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.085964][ T9488] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.155668][ T9711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.241170][ T9711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.414041][ T9711] team0: Port device team_slave_0 added [ 343.463003][ T9711] team0: Port device team_slave_1 added [ 343.519591][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.539308][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.601092][ T9711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.608040][ T9711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.695410][ T9711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.719967][ T9772] trusted_key: encrypted_key: insufficient parameters specified [ 343.740108][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 343.755126][ T3838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.784101][ T9711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.794321][ T3838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.799493][ T9711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.872877][ T9711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.890164][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 343.989568][ T9775] loop2: detected capacity change from 0 to 16 [ 344.039679][ T8949] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 344.077207][ T9711] device hsr_slave_0 entered promiscuous mode [ 344.094829][ T9711] device hsr_slave_1 entered promiscuous mode [ 344.147713][ T9775] erofs: (device loop2): mounted with root inode @ nid 36. [ 344.289219][ T8949] usb 1-1: Using ep0 maxpacket: 32 [ 344.409576][ T8949] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.437145][ T9778] binder: transaction release 28 bad object at offset 536871616, size 72 [ 344.469260][ T8949] usb 1-1: config 0 has no interfaces? [ 344.498868][ T9766] chnl_net:caif_netlink_parms(): no params data found [ 344.499262][ T8949] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 344.589251][ T8949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.619840][ T8949] usb 1-1: config 0 descriptor?? [ 344.625691][ T8952] Bluetooth: hci1: command 0x041b tx timeout [ 344.629909][ T9782] loop2: detected capacity change from 0 to 512 [ 344.683965][ T9782] EXT4-fs (loop2): Ignoring removed orlov option [ 344.696609][ T9711] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.739122][ T9782] EXT4-fs (loop2): 1 truncate cleaned up [ 344.744928][ T9782] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,quota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,orlov,i_version,data_err=ignore,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 344.874807][ T9787] EXT4-fs warning (device loop2): ext4_dirblock_csum_set:426: inode #12: comm syz.2.1643: No space for directory leaf checksum. Please run e2fsck -D. [ 344.941627][ T9711] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.960255][ T9787] EXT4-fs error (device loop2): ext4_free_branches:1043: inode #13: block 234881024: comm syz.2.1643: Read failure [ 345.011691][ T9787] EXT4-fs (loop2): Remounting filesystem read-only [ 345.143513][ T9711] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.297563][ T9766] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.321302][ T9766] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.343630][ T9488] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /2/file0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 345.384973][ T9766] device bridge_slave_0 entered promiscuous mode [ 345.412110][ T9711] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.449392][ T8950] Bluetooth: hci4: command 0x0409 tx timeout [ 345.484429][ T9766] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.492388][ T9488] EXT4-fs error (device loop2): ext4_lookup:1855: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature. [ 345.506828][ T9766] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.540353][ T9766] device bridge_slave_1 entered promiscuous mode [ 345.629058][ T9488] EXT4-fs error (device loop2): ext4_lookup:1855: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature. [ 345.741898][ T9766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.831237][ T9766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.947467][ T9766] team0: Port device team_slave_0 added [ 345.966468][ T9711] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 345.992507][ T9766] team0: Port device team_slave_1 added [ 345.999428][ T9711] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 346.023523][ T9711] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 346.057087][ T9711] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 346.078212][ T9766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.095141][ T9766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.128887][ T9766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.272102][ T9766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.301291][ T9766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.339366][ T9766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.499052][ T9711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.546271][ T9711] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.588940][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 346.602425][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 346.629268][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 346.659682][ T8873] Bluetooth: hci1: command 0x040f tx timeout [ 346.659842][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 346.675522][ T8950] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.682597][ T8950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.690396][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 346.698867][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 346.707874][ T8950] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.714946][ T8950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.722721][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 346.762046][ T8873] usb 1-1: USB disconnect, device number 22 [ 346.789933][ T9766] device hsr_slave_0 entered promiscuous mode [ 346.808430][ T9766] device hsr_slave_1 entered promiscuous mode [ 346.826785][ T9766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.841933][ T9766] Cannot create hsr debugfs directory [ 346.862297][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 346.870987][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 346.881503][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 346.895043][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 346.903687][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 346.913065][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 346.921684][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 346.930075][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 346.968908][ T9711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.991340][ T9711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 347.003103][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 347.015540][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 347.024778][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.055772][ T1228] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.136171][ T1228] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.175679][ T1228] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.219391][ T8029] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 347.252604][ T1228] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.331574][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 347.351658][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 348.477804][ T8873] Bluetooth: hci4: command 0x041b tx timeout [ 348.507382][ T9711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.534425][ T9806] chnl_net:caif_netlink_parms(): no params data found [ 348.708861][ T9806] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.726481][ T9806] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.739097][ T9806] device bridge_slave_0 entered promiscuous mode [ 348.754798][ T9806] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.769831][ T9806] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.777998][ T9806] device bridge_slave_1 entered promiscuous mode [ 348.828863][ T9806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.845135][ T8959] Bluetooth: hci2: command 0x0409 tx timeout [ 348.851391][ T8959] Bluetooth: hci1: command 0x0419 tx timeout [ 348.858776][ T9806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.870351][ T8029] usb 2-1: Using ep0 maxpacket: 8 [ 348.922583][ T9834] bridge0: port 3(erspan0) entered disabled state [ 348.929130][ T9834] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.936422][ T9834] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.988010][ T9806] team0: Port device team_slave_0 added [ 348.994332][ T8029] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 349.003692][ T8029] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.014110][ T8029] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.024180][ T8029] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 349.039318][ T8029] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.065986][ T8029] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 349.071194][ T9806] team0: Port device team_slave_1 added [ 349.084919][ T8029] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.114553][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 349.124046][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.133360][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 349.141705][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.150523][ T9711] device veth0_vlan entered promiscuous mode [ 349.204096][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 349.212510][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 349.237483][ T9806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.252880][ T9806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.279671][ T9806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.296896][ T1228] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.318607][ T9839] device wg2 entered promiscuous mode [ 349.326783][ T9711] device veth1_vlan entered promiscuous mode [ 349.334140][ T9806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.342472][ T9806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.370202][ T9806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.381055][ T8029] usb 2-1: usb_control_msg returned -32 [ 349.386690][ T8029] usbtmc 2-1:16.0: can't read capabilities [ 349.433166][ T1228] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.465467][ T9806] device hsr_slave_0 entered promiscuous mode [ 349.472592][ T9806] device hsr_slave_1 entered promiscuous mode [ 349.479098][ T9806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.487513][ T9806] Cannot create hsr debugfs directory [ 349.509414][ T1228] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.522128][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 349.531180][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 349.551427][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 349.560069][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 349.573800][ T9711] device veth0_macvtap entered promiscuous mode [ 349.611697][ T1228] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.628988][ T9711] device veth1_macvtap entered promiscuous mode [ 349.681942][ T9711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.707971][ T9711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.727334][ T9711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.741666][ T9711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.754055][ T9711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.764629][ T9711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.775868][ T9711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.788147][ T9711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.806162][ T9711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.817797][ T9711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.835020][ T9711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.847005][ T9711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.867907][ T9711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.894890][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 349.909470][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 349.917991][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 349.926629][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 349.962453][ T9711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.988459][ T9711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.008578][ T9711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.028811][ T9711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.038731][ T9711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.059110][ T9711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.069108][ T9711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.089953][ T9711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.108652][ T9711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.129240][ T9711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.139044][ T9711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.158393][ T9711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.171218][ T9711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.187850][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 350.199911][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 350.212756][ T9711] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.224279][ T9711] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.234177][ T9711] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.243116][ T9711] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.526520][ T1228] tipc: Left network mode [ 350.557226][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.569485][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.572890][ T8950] Bluetooth: hci4: command 0x040f tx timeout [ 350.606100][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 350.633133][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.646634][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.666930][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 350.747721][ T9134] usb 2-1: USB disconnect, device number 16 [ 350.849484][ T9876] loop1: detected capacity change from 0 to 512 [ 350.889574][ T8952] Bluetooth: hci2: command 0x041b tx timeout [ 350.944848][ T9876] EXT4-fs (loop1): Ignoring removed orlov option [ 350.976902][ T9876] EXT4-fs (loop1): 1 truncate cleaned up [ 350.985167][ T9876] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,quota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,orlov,i_version,data_err=ignore,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 351.079877][ T9876] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:426: inode #12: comm syz.1.1663: No space for directory leaf checksum. Please run e2fsck -D. [ 351.096420][ T9876] EXT4-fs error (device loop1): ext4_free_branches:1043: inode #13: block 234881024: comm syz.1.1663: Read failure [ 351.110096][ T9876] EXT4-fs (loop1): Remounting filesystem read-only [ 351.150092][ T9439] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /8/file0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 351.173038][ T9439] EXT4-fs error (device loop1): ext4_lookup:1855: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature. [ 351.206273][ T9439] EXT4-fs error (device loop1): ext4_lookup:1855: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature. [ 351.328925][ T9889] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 351.787786][ T9766] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 351.840683][ T9766] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 352.020013][ T9766] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 352.077218][ T9806] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 352.131980][ T9766] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.720428][ T8952] Bluetooth: hci4: command 0x0419 tx timeout [ 352.735545][ T9806] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 352.756039][ T9806] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 352.860893][ T9806] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 353.159472][ T25] audit: type=1326 audit(1723540219.514:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c05ce9f9 code=0x7fc00000 [ 353.430827][ T25] audit: type=1326 audit(1723540219.514:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f47c05ce9f9 code=0x7fc00000 [ 353.568744][ T8955] Bluetooth: hci2: command 0x040f tx timeout [ 353.604740][ T9766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.637642][ T25] audit: type=1326 audit(1723540219.524:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c05ce9f9 code=0x7fc00000 [ 353.676103][ T9766] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.712433][ T25] audit: type=1326 audit(1723540219.524:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c05ce9f9 code=0x7fc00000 [ 353.756189][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 353.764260][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 353.816544][ T25] audit: type=1326 audit(1723540219.524:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c05ce9f9 code=0x7fc00000 [ 353.829513][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 353.860177][ T25] audit: type=1326 audit(1723540219.524:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c05ce9f9 code=0x7fc00000 [ 353.860185][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 353.860211][ T25] audit: type=1326 audit(1723540219.524:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c05ce9f9 code=0x7fc00000 [ 353.901404][ T8029] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.920699][ T8029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.925794][ T25] audit: type=1326 audit(1723540219.524:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c05ce9f9 code=0x7fc00000 [ 353.950672][ T25] audit: type=1326 audit(1723540219.524:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c05ce9f9 code=0x7fc00000 [ 353.960595][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 353.974151][ T25] audit: type=1326 audit(1723540219.534:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c05ce9f9 code=0x7fc00000 [ 353.999793][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.029632][ T8029] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.036670][ T8029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.059480][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 354.109707][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 354.118006][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 354.130154][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 354.140519][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 354.155564][ T9806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.238614][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 354.250232][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 354.265724][ T9933] loop3: detected capacity change from 0 to 512 [ 354.270318][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 354.290036][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 354.298190][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.316348][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 354.326969][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 354.352475][ T9766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 354.364567][ T9933] EXT4-fs (loop3): Ignoring removed orlov option [ 354.405969][ T9806] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.423641][ T9933] EXT4-fs (loop3): 1 truncate cleaned up [ 354.436045][ T9933] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,quota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,orlov,i_version,data_err=ignore,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 354.439702][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 354.490339][ T3618] Bluetooth: hci3: command 0x0409 tx timeout [ 354.509964][ T9933] EXT4-fs warning (device loop3): ext4_dirblock_csum_set:426: inode #12: comm syz.3.1677: No space for directory leaf checksum. Please run e2fsck -D. [ 354.560699][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 354.568405][ T9933] EXT4-fs error (device loop3): ext4_free_branches:1043: inode #13: block 234881024: comm syz.3.1677: Read failure [ 354.598039][ T9933] EXT4-fs (loop3): Remounting filesystem read-only [ 354.653628][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 354.672239][ T9711] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 354.696330][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 354.707000][ T8959] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.709584][ T9711] EXT4-fs error (device loop3): ext4_lookup:1855: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature. [ 354.714080][ T8959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.740334][ T9711] EXT4-fs error (device loop3): ext4_lookup:1855: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature. [ 354.842335][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 354.859874][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 354.879637][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.894812][ T8955] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.901898][ T8955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.921681][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 354.937764][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 354.966631][ T9766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.059316][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 355.066772][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 355.150087][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 355.171020][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 355.201512][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 355.218358][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 355.227158][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 355.238410][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 355.258900][ T9910] chnl_net:caif_netlink_parms(): no params data found [ 355.276758][ T9806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.310573][ T9806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 355.330278][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 355.338053][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 355.354905][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 355.468311][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 355.507099][ T8955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 355.586432][ T9766] device veth0_vlan entered promiscuous mode [ 355.619508][ T2988] Bluetooth: hci2: command 0x0419 tx timeout [ 355.653867][ T9766] device veth1_vlan entered promiscuous mode [ 355.684585][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 355.726574][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 355.771953][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 355.837435][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 355.850249][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 355.873608][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 355.947991][ T9910] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.957898][ T9978] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 355.962925][ T9910] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.977451][ T9910] device bridge_slave_0 entered promiscuous mode [ 356.004287][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 356.018018][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 356.034192][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 356.045645][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 356.069079][ T9806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.095970][ T9910] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.103607][ T9910] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.112222][ T9910] device bridge_slave_1 entered promiscuous mode [ 356.127237][ T9766] device veth0_macvtap entered promiscuous mode [ 356.186516][ T9766] device veth1_macvtap entered promiscuous mode [ 356.197960][ T1228] device hsr_slave_0 left promiscuous mode [ 356.206240][ T1228] device hsr_slave_1 left promiscuous mode [ 356.214375][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.222366][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.231331][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.238820][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.247262][ T1228] device bridge_slave_1 left promiscuous mode [ 356.255354][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.264925][ T1228] device bridge_slave_0 left promiscuous mode [ 356.271637][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.287021][ T1228] device hsr_slave_0 left promiscuous mode [ 356.295199][ T1228] device hsr_slave_1 left promiscuous mode [ 356.302125][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.311131][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.318633][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.326804][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.335868][ T1228] device bridge_slave_1 left promiscuous mode [ 356.342184][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.350800][ T1228] device bridge_slave_0 left promiscuous mode [ 356.356966][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.368581][ T1228] device hsr_slave_0 left promiscuous mode [ 356.374844][ T1228] device hsr_slave_1 left promiscuous mode [ 356.381818][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.389435][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.397108][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.404900][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.413379][ T1228] device bridge_slave_1 left promiscuous mode [ 356.420888][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.429043][ T1228] device bridge_slave_0 left promiscuous mode [ 356.435882][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.451946][ T1228] device veth1_macvtap left promiscuous mode [ 356.457962][ T1228] device veth0_macvtap left promiscuous mode [ 356.464488][ T1228] device veth1_vlan left promiscuous mode [ 356.471615][ T1228] device veth0_vlan left promiscuous mode [ 356.478109][ T1228] device veth1_macvtap left promiscuous mode [ 356.484485][ T1228] device veth0_macvtap left promiscuous mode [ 356.490807][ T1228] device veth1_vlan left promiscuous mode [ 356.496566][ T1228] device veth0_vlan left promiscuous mode [ 356.504020][ T1228] device veth1_macvtap left promiscuous mode [ 356.510476][ T1228] device veth0_macvtap left promiscuous mode [ 356.516505][ T1228] device veth1_vlan left promiscuous mode [ 356.522440][ T1228] device veth0_vlan left promiscuous mode [ 356.569551][ T3614] Bluetooth: hci3: command 0x041b tx timeout [ 356.877734][ T1228] team0 (unregistering): Port device team_slave_1 removed [ 356.891537][ T1228] team0 (unregistering): Port device team_slave_0 removed [ 356.905663][ T1228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.918822][ T1228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.994225][ T1228] bond0 (unregistering): Released all slaves [ 357.108220][ T1228] team0 (unregistering): Port device team_slave_1 removed [ 357.123037][ T1228] team0 (unregistering): Port device team_slave_0 removed [ 357.138942][ T1228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.154117][ T1228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.229577][ T1228] bond0 (unregistering): Released all slaves [ 357.346260][ T1228] team0 (unregistering): Port device team_slave_1 removed [ 357.361573][ T1228] team0 (unregistering): Port device team_slave_0 removed [ 357.374690][ T1228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.390791][ T1228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.460090][ T1228] bond0 (unregistering): Released all slaves [ 357.531470][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 357.560213][ T9910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.572995][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 357.581548][ T9910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.616116][ T9766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.637817][ T9766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.648317][ T9766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.670808][ T9766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.689328][ T9766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.709188][ T9766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.719001][ T9766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.740214][ T9766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.762841][ T9766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.783103][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 357.799928][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 357.817918][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 357.836780][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 357.866474][ T9806] device veth0_vlan entered promiscuous mode [ 357.902320][ T9766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.921821][ T9766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.932005][ T9134] Bluetooth: hci1: command 0x0409 tx timeout [ 357.934342][ T9766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.959266][ T9766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.970148][ T9766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.980743][ T9766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.990583][ T9766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.001044][ T9766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.012490][ T9766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.024036][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 358.032885][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 358.041791][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 358.050531][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 358.063806][ T9806] device veth1_vlan entered promiscuous mode [ 358.076977][ T9910] team0: Port device team_slave_0 added [ 358.106868][ T9910] team0: Port device team_slave_1 added [ 358.139432][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 358.147142][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 358.155252][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 358.175214][ T9766] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.184587][ T9766] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.193393][ T9766] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.204151][ T9766] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.234837][ T9910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.243147][ T9910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.270842][ T9910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.289176][ T9806] device veth0_macvtap entered promiscuous mode [ 358.317953][ T9134] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 358.331940][ T9134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 358.341759][ T9134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.353029][ T9910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.360679][ T9910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.386856][ T9910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.450183][ T9134] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 358.467419][ T9806] device veth1_macvtap entered promiscuous mode [ 358.507522][ T9972] chnl_net:caif_netlink_parms(): no params data found [ 358.539675][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 358.566273][ T9910] device hsr_slave_0 entered promiscuous mode [ 358.576259][ T9910] device hsr_slave_1 entered promiscuous mode [ 358.583683][ T9910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.591592][ T9910] Cannot create hsr debugfs directory [ 358.650286][ T26] Bluetooth: hci3: command 0x040f tx timeout [ 358.677300][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.688877][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.704133][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.716233][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.726140][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.736805][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.747471][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.764813][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.774669][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.785762][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.798015][ T9806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.843112][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 358.852074][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 358.870001][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.878287][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.917113][ T3838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.925873][ T3838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.972747][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.996305][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.006182][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.016663][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.026482][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.036924][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.052617][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.073397][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.110186][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.129578][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.248929][ T9806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.578765][ T9806] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.628591][ T9806] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.719208][ T9806] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.738194][ T9806] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.756711][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 359.764687][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 359.773277][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 359.781957][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 359.865219][ T9972] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.927674][ T9972] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.963157][ T9972] device bridge_slave_0 entered promiscuous mode [ 359.979267][T10041] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 360.016840][ T8950] Bluetooth: hci1: command 0x041b tx timeout [ 360.026761][ T9972] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.034829][ T9972] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.055778][ T9972] device bridge_slave_1 entered promiscuous mode [ 360.203517][ T9972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.228911][ T9972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.245903][ T7822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.269377][ T7822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.296640][ T2988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 360.344049][ T9910] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.376530][ T9972] team0: Port device team_slave_0 added [ 360.395775][ T9972] team0: Port device team_slave_1 added [ 360.405625][ T4055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.450393][ T4055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.466623][ T9910] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.506678][ T8949] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 360.582807][ T9910] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.641197][ T9972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.651511][ T9972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.729282][ T8952] Bluetooth: hci3: command 0x0419 tx timeout [ 360.755996][ T9972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.798539][ T9972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.828609][ T9972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.873126][ T9972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.932650][ T9910] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.121691][ T9972] device hsr_slave_0 entered promiscuous mode [ 361.141567][ T9972] device hsr_slave_1 entered promiscuous mode [ 361.159331][ T9972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.167346][ T9972] Cannot create hsr debugfs directory [ 361.409949][ T9910] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 361.570845][T10051] loop2: detected capacity change from 0 to 32768 [ 362.186809][ T8952] Bluetooth: hci1: command 0x040f tx timeout [ 362.205830][ T9910] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 362.277556][T10051] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop2 scanned by syz.2.1692 (10051) [ 362.347626][T10051] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 362.348877][ T9972] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.390182][T10051] BTRFS info (device loop2): using free space tree [ 362.415279][T10051] BTRFS info (device loop2): has skinny extents [ 362.448461][ T9910] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 362.479586][ T9910] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 362.517978][ T9972] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.623166][ T9972] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.696354][T10051] BTRFS info (device loop2): enabling ssd optimizations [ 362.715434][ T9972] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.823749][ T9910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.851886][T10086] loop4: detected capacity change from 0 to 2048 [ 362.876165][ T25] kauditd_printk_skb: 22 callbacks suppressed [ 362.876180][ T25] audit: type=1804 audit(1723540229.304:2846): pid=10051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1692" name="/newroot/2/file0/bus" dev="loop2" ino=263 res=1 errno=0 [ 362.908917][T10090] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 362.919697][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 362.927421][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 362.954892][ T9910] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.974446][ T9134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 362.986089][ T9134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 363.014573][ T9134] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.021669][ T9134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.060274][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 363.076150][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 363.088141][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 363.097943][ T3618] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.105042][ T3618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.112930][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 363.121666][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 363.125324][T10086] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 363.130378][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 363.152607][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 363.190927][ T9972] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 363.344155][T10094] EXT4-fs (loop4): shut down requested (0) [ 363.363905][ T9972] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 363.398492][ T9972] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 363.435081][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 363.457723][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 363.489971][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 363.498983][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 363.530030][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 363.540770][T10086] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1699: bg 0: block 234: padding at end of block bitmap is not set [ 363.570639][T10086] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 922 with error 28 [ 363.588019][ T9910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.615820][ T9910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 363.634094][ T9972] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 363.648804][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 363.663438][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 363.679059][T10086] EXT4-fs (loop4): This should not happen!! Data will be lost [ 363.679059][T10086] [ 363.765126][T10086] EXT4-fs (loop4): Total free blocks count 0 [ 363.818597][T10086] EXT4-fs (loop4): Free/Dirty block details [ 363.858395][T10086] EXT4-fs (loop4): free_blocks=0 [ 363.899519][T10086] EXT4-fs (loop4): dirty_blocks=928 [ 363.904989][T10086] EXT4-fs (loop4): Block reservation details [ 363.943917][ T9972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.957297][T10086] EXT4-fs (loop4): i_reserved_data_blocks=58 [ 363.968887][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 363.976803][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 364.012696][ T9972] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.024719][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 364.041752][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 364.064058][ T3675] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.071158][ T3675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.190375][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 364.199835][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 364.238180][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 364.261569][T10095] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.268654][T10095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.922329][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 364.934823][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 364.944260][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 364.954596][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 364.963415][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 364.979964][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 364.988435][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 364.997282][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 365.008038][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 365.025218][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 365.033557][T10126] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 365.052560][ T8958] Bluetooth: hci1: command 0x0419 tx timeout [ 365.069715][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 365.096734][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 365.114360][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 365.181861][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 365.261561][ T9910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.382025][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 365.400868][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 365.448766][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 365.460487][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 365.480709][ T9910] device veth0_vlan entered promiscuous mode [ 365.504311][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 365.533938][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 365.539482][ T8952] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 365.566907][ T9910] device veth1_vlan entered promiscuous mode [ 365.613609][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 365.632574][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 365.662478][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 365.686669][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 365.724440][ T9910] device veth0_macvtap entered promiscuous mode [ 365.758639][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 365.808338][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 365.809264][ T8952] usb 3-1: Using ep0 maxpacket: 8 [ 365.932671][ T9972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.962881][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 366.336201][ T9910] device veth1_macvtap entered promiscuous mode [ 366.349831][ T8952] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 366.369671][ T8952] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 366.387953][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 366.401773][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 366.402581][ T8952] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 366.437696][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 366.481603][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.499736][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.510263][ T8952] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 366.526818][ T8952] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 366.558636][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.572101][ T8952] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 366.597465][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.617065][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.637099][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.647299][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.658914][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.676064][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.689466][ T8952] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 366.697039][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.709288][ T8952] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 366.725041][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.736564][ T8952] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 366.749356][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.783107][ T9910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.803240][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 366.822684][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 366.877348][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.904816][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.916697][T10144] loop4: detected capacity change from 0 to 40427 [ 366.929055][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.940222][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.951315][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.977582][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.989330][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.007007][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.017592][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.102269][ T8952] usb 3-1: string descriptor 0 read error: -22 [ 367.102358][ T8952] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 367.102382][ T8952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.104463][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.104484][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.104499][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.105857][ T9910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.108525][ T9972] device veth0_vlan entered promiscuous mode [ 367.110975][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 367.111534][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 367.112116][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 367.112623][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 367.117970][ T9972] device veth1_vlan entered promiscuous mode [ 367.122612][ T9910] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.122635][ T9910] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.122650][ T9910] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.122666][ T9910] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.140484][ T8952] adutux 3-1:168.0: interrupt endpoints not found [ 367.317836][T10144] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 367.329584][T10144] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 367.387606][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 367.399281][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 367.413207][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 367.428857][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 367.435739][T10144] F2FS-fs (loop4): Found nat_bits in checkpoint [ 367.481096][ T9972] device veth0_macvtap entered promiscuous mode [ 367.502333][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 367.519897][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 367.532452][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 367.556608][ T9972] device veth1_macvtap entered promiscuous mode [ 367.565832][ T3614] usb 3-1: USB disconnect, device number 21 [ 367.689599][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.706612][T10144] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 367.706862][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.732852][T10144] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 367.762079][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.773904][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.784692][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.797371][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.808332][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.819353][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.832312][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.844996][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.857761][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.868576][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.880195][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.891810][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.918056][ T9972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.975307][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 368.011704][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 368.023971][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 368.038480][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.041788][ T4138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.065770][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.089094][ T4138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.106456][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.146285][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.157290][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.168726][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.199242][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.213405][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.227108][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.242709][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.335467][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.346527][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.356590][ T9972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.367124][ T9972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.750163][ T9972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.861443][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 368.870883][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 368.881016][ T8950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 368.898804][ T9972] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.915150][T10174] loop2: detected capacity change from 0 to 1024 [ 368.929183][ T9972] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.937873][ T9972] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.961450][ T9972] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.000632][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.040724][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.053419][T10174] hfsplus: extend alloc file! (8192,65536,366) [ 369.091513][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 369.186074][T10179] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 369.340686][ T7822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.356276][T10183] loop1: detected capacity change from 0 to 512 [ 369.360686][ T7822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.403999][T10183] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 369.425276][T10183] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 369.450334][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 369.462454][T10183] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.1727: corrupted in-inode xattr [ 369.478170][ T7822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.505163][T10183] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1727: couldn't read orphan inode 15 (err -117) [ 369.507927][ T7822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.524086][T10183] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,mblk_io_submit,lazytime,nogrpid,block_validity,user_xattr,,errors=continue. Quota mode: none. [ 369.569376][ T9910] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /1/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 369.591557][ T9910] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 369.615841][ T9910] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /1/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 369.640793][ T9910] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 369.678473][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 369.717580][ T9910] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /1/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 369.775241][ T9910] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 369.973085][ T25] audit: type=1326 audit(1723540236.394:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.4.1722" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f248719f9 code=0x0 [ 370.339806][ T3675] Bluetooth: hci8: command 0x0406 tx timeout [ 370.346832][ T9910] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /1/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 370.522753][ T9910] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 370.599333][T10198] 9pnet: p9_client_clunk (10198): Trying to clunk with invalid fid [ 370.607243][T10198] CPU: 1 PID: 10198 Comm: syz.4.1731 Not tainted 5.15.164-syzkaller #0 [ 370.615483][T10198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 370.625535][T10198] Call Trace: [ 370.628807][T10198] [ 370.631735][T10198] dump_stack_lvl+0x1e3/0x2d0 [ 370.636432][T10198] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 370.642070][T10198] ? panic+0x860/0x860 [ 370.646160][T10198] p9_client_clunk+0x2d0/0x390 [ 370.650937][T10198] v9fs_statfs+0x170/0x4e0 [ 370.651529][ T9910] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /1/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 370.655350][T10198] ? v9fs_drop_inode+0x120/0x120 [ 370.655372][T10198] ? rcu_is_watching+0x11/0xa0 [ 370.655404][T10198] user_statfs+0x20e/0x450 [ 370.690945][T10198] ? vfs_statfs+0x2b0/0x2b0 [ 370.695909][T10198] __x64_sys_statfs+0xe4/0x1a0 [ 370.700699][T10198] ? fd_statfs+0x380/0x380 [ 370.705125][T10198] ? __context_tracking_exit+0x4c/0x80 [ 370.708782][ T9910] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 370.710589][T10198] ? __lock_acquire+0x1ff0/0x1ff0 [ 370.710615][T10198] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 370.710649][T10198] ? syscall_enter_from_user_mode+0x2e/0x240 [ 370.710668][T10198] ? lockdep_hardirqs_on+0x94/0x130 [ 370.710686][T10198] ? syscall_enter_from_user_mode+0x2e/0x240 [ 370.710707][T10198] do_syscall_64+0x3b/0xb0 [ 370.710722][T10198] ? clear_bhb_loop+0x15/0x70 [ 370.710741][T10198] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 370.710768][T10198] RIP: 0033:0x7f8f248719f9 [ 370.710786][T10198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.710806][T10198] RSP: 002b:00007f8f22cee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 370.710825][T10198] RAX: ffffffffffffffda RBX: 00007f8f24a0df80 RCX: 00007f8f248719f9 [ 370.710839][T10198] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 370.710851][T10198] RBP: 00007f8f248df8ee R08: 0000000000000000 R09: 0000000000000000 [ 370.710863][T10198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.710874][T10198] R13: 0000000000000000 R14: 00007f8f24a0df80 R15: 00007fff71d018d8 [ 370.710899][T10198] [ 370.874072][T10196] loop3: detected capacity change from 0 to 32768 [ 371.185296][T10202] loop2: detected capacity change from 0 to 256 [ 371.421029][T10202] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 371.511462][T10202] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 371.604317][T10202] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 371.640551][ T25] audit: type=1800 audit(1723540238.074:2848): pid=10202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1732" name="file1" dev="loop2" ino=1048654 res=0 errno=0 [ 373.024427][T10220] loop2: detected capacity change from 0 to 1024 [ 373.107536][T10220] hfsplus: extend alloc file! (8192,65536,366) [ 373.140897][ T9134] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 373.182143][ T1228] device hsr_slave_0 left promiscuous mode [ 373.199475][ T1228] device hsr_slave_1 left promiscuous mode [ 373.214232][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.224270][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.232414][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.240719][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.277683][ T1228] device bridge_slave_1 left promiscuous mode [ 373.289653][ T8029] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 373.307179][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.353574][ T1228] device bridge_slave_0 left promiscuous mode [ 373.372897][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.416136][ T1228] device hsr_slave_0 left promiscuous mode [ 373.424823][T10231] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 373.434690][ T9134] usb 4-1: Using ep0 maxpacket: 8 [ 373.463973][ T1228] device hsr_slave_1 left promiscuous mode [ 373.496371][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.504834][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.515055][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.534910][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.544744][ T1228] device bridge_slave_1 left promiscuous mode [ 373.555032][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.575440][ T1228] device bridge_slave_0 left promiscuous mode [ 373.583333][ T9134] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.595766][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.605889][ T9134] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 373.615643][ T9134] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 373.627666][ T9134] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 373.641031][ T9134] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 373.651802][ T9134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.660568][ T1228] device veth1_macvtap left promiscuous mode [ 373.667777][ T1228] device veth0_macvtap left promiscuous mode [ 373.683984][ T1228] device veth1_vlan left promiscuous mode [ 373.691289][ T1228] device veth0_vlan left promiscuous mode [ 373.708228][ T1228] device veth1_macvtap left promiscuous mode [ 373.709334][ T8029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.722208][ T1228] device veth0_macvtap left promiscuous mode [ 373.733234][ T9134] hub 4-1:1.0: bad descriptor, ignoring hub [ 373.733496][ T8029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.750393][ T8029] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.764028][ T8029] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 373.773505][ T9134] hub: probe of 4-1:1.0 failed with error -5 [ 373.773714][ T8029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.802760][ T9134] cdc_wdm 4-1:1.0: skipping garbage [ 373.803781][ T8029] usb 5-1: config 0 descriptor?? [ 373.808181][ T1228] device veth1_vlan left promiscuous mode [ 373.828513][ T9134] cdc_wdm 4-1:1.0: skipping garbage [ 373.843095][ T9134] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 373.850719][ T9134] cdc_wdm 4-1:1.0: Unknown control protocol [ 373.857596][ T1228] device veth0_vlan left promiscuous mode [ 373.951516][ T9134] usb 4-1: USB disconnect, device number 22 [ 374.065519][T10234] loop2: detected capacity change from 0 to 2048 [ 374.210724][T10234] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 374.300799][ T8029] acrux 0003:1A34:0802.0010: unknown main item tag 0x0 [ 374.307818][ T8029] acrux 0003:1A34:0802.0010: unknown main item tag 0x0 [ 374.319452][ T8029] acrux 0003:1A34:0802.0010: unknown main item tag 0x0 [ 374.328047][ T8029] acrux 0003:1A34:0802.0010: unknown main item tag 0x0 [ 374.344190][ T8029] acrux 0003:1A34:0802.0010: unknown main item tag 0x0 [ 374.377395][ T8029] acrux 0003:1A34:0802.0010: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 374.481588][ T8029] acrux 0003:1A34:0802.0010: no inputs found [ 374.528815][ T8029] acrux 0003:1A34:0802.0010: Failed to enable force feedback support, error: -19 [ 374.922150][ T1228] team0 (unregistering): Port device team_slave_1 removed [ 374.934944][ T1228] team0 (unregistering): Port device team_slave_0 removed [ 374.951971][ T1228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.967078][ T1228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.043131][ T1228] bond0 (unregistering): Released all slaves [ 375.189039][ T1228] team0 (unregistering): Port device team_slave_1 removed [ 375.203199][ T1228] team0 (unregistering): Port device team_slave_0 removed [ 375.216600][ T1228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.235729][ T1228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.304249][ T1228] bond0 (unregistering): Released all slaves [ 375.353125][T10251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.366794][T10251] device batadv_slave_0 entered promiscuous mode [ 375.539372][ T9134] Bluetooth: hci3: command 0x0409 tx timeout [ 375.575044][T10256] loop2: detected capacity change from 0 to 1024 [ 375.704142][T10256] hfsplus: extend alloc file! (8192,65536,366) [ 375.802395][ T3675] usb 5-1: reset high-speed USB device number 23 using dummy_hcd [ 375.839974][T10230] chnl_net:caif_netlink_parms(): no params data found [ 375.917889][T10267] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 375.948955][T10265] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 375.993461][T10230] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.000746][T10230] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.008890][T10230] device bridge_slave_0 entered promiscuous mode [ 376.030729][T10230] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.037845][T10230] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.047546][T10230] device bridge_slave_1 entered promiscuous mode [ 376.078541][T10230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.109601][T10230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.167389][T10230] team0: Port device team_slave_0 added [ 376.174827][T10230] team0: Port device team_slave_1 added [ 376.298873][ T25] audit: type=1326 audit(1723540242.724:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b81ab89f9 code=0x7ffc0000 [ 376.342793][T10230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.375189][ T25] audit: type=1326 audit(1723540242.734:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f5b81ab89f9 code=0x7ffc0000 [ 376.404413][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.444352][T10230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.475109][T10230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.502072][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.506953][ T25] audit: type=1326 audit(1723540242.734:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b81ab89f9 code=0x7ffc0000 [ 376.533063][T10276] loop4: detected capacity change from 0 to 1024 [ 376.560249][T10230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.724412][ T8029] usb 5-1: USB disconnect, device number 23 [ 376.805055][T10285] attempt to access beyond end of device [ 376.805055][T10285] loop4: rw=0, want=201326594, limit=1024 [ 376.825572][T10285] Buffer I/O error on dev loop4, logical block 100663296, async page read [ 376.840138][T10285] hfsplus: unable to mark blocks free: error -5 [ 376.847691][T10285] hfsplus: can't free extent [ 377.063293][T10230] device hsr_slave_0 entered promiscuous mode [ 377.287601][T10290] loop3: detected capacity change from 0 to 1024 [ 377.294887][T10230] device hsr_slave_1 entered promiscuous mode [ 377.322373][T10291] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 377.363915][T10290] [ 377.366232][T10290] ====================================================== [ 377.373236][T10290] WARNING: possible circular locking dependency detected [ 377.380244][T10290] 5.15.164-syzkaller #0 Not tainted [ 377.385584][T10290] ------------------------------------------------------ [ 377.392569][T10290] syz.3.1765/10290 is trying to acquire lock: [ 377.398603][T10290] ffff888022e8f3c8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x1d2/0x1b10 [ 377.409615][T10290] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 377.409615][T10290] but task is already holding lock: [ 377.416946][T10290] ffff888079c940b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0 [ 377.426394][T10290] [ 377.426394][T10290] which lock already depends on the new lock. [ 377.426394][T10290] [ 377.436783][T10290] [ 377.436783][T10290] the existing dependency chain (in reverse order) is: [ 377.445786][T10290] [ 377.445786][T10290] -> #1 (&tree->tree_lock){+.+.}-{3:3}: [ 377.453514][T10290] lock_acquire+0x1db/0x4f0 [ 377.458533][T10290] __mutex_lock_common+0x1da/0x25a0 [ 377.464230][T10290] mutex_lock_nested+0x17/0x20 [ 377.469492][T10290] hfsplus_file_truncate+0x864/0xb80 [ 377.475296][T10290] hfsplus_setattr+0x1b9/0x280 [ 377.480579][T10290] notify_change+0xc6d/0xf50 [ 377.485687][T10290] do_truncate+0x21c/0x300 [ 377.490622][T10290] path_openat+0x28a3/0x2f20 [ 377.495737][T10290] do_filp_open+0x21c/0x460 [ 377.500768][T10290] do_sys_openat2+0x13b/0x4f0 [ 377.505960][T10290] __x64_sys_creat+0x11f/0x160 [ 377.511241][T10290] do_syscall_64+0x3b/0xb0 [ 377.516169][T10290] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.522567][T10290] [ 377.522567][T10290] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}: [ 377.531569][T10290] validate_chain+0x1649/0x5930 [ 377.536920][T10290] __lock_acquire+0x1295/0x1ff0 [ 377.542273][T10290] lock_acquire+0x1db/0x4f0 [ 377.547268][T10290] __mutex_lock_common+0x1da/0x25a0 [ 377.552960][T10290] mutex_lock_nested+0x17/0x20 [ 377.558213][T10290] hfsplus_file_extend+0x1d2/0x1b10 [ 377.563909][T10290] hfsplus_bmap_reserve+0x101/0x4e0 [ 377.569605][T10290] hfsplus_create_cat+0x1a9/0x1ba0 [ 377.575225][T10290] hfsplus_fill_super+0x13e6/0x1c90 [ 377.580921][T10290] mount_bdev+0x2c9/0x3f0 [ 377.585743][T10290] legacy_get_tree+0xeb/0x180 [ 377.590911][T10290] vfs_get_tree+0x88/0x270 [ 377.595821][T10290] do_new_mount+0x2ba/0xb40 [ 377.600812][T10290] __se_sys_mount+0x2d5/0x3c0 [ 377.605979][T10290] do_syscall_64+0x3b/0xb0 [ 377.610885][T10290] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.617271][T10290] [ 377.617271][T10290] other info that might help us debug this: [ 377.617271][T10290] [ 377.627444][ T9134] Bluetooth: hci3: command 0x041b tx timeout [ 377.627473][T10290] Possible unsafe locking scenario: [ 377.627473][T10290] [ 377.627480][T10290] CPU0 CPU1 [ 377.646183][T10290] ---- ---- [ 377.651523][T10290] lock(&tree->tree_lock); [ 377.656019][T10290] lock(&HFSPLUS_I(inode)->extents_lock); [ 377.664319][T10290] lock(&tree->tree_lock); [ 377.671316][T10290] lock(&HFSPLUS_I(inode)->extents_lock); [ 377.677098][T10290] [ 377.677098][T10290] *** DEADLOCK *** [ 377.677098][T10290] [ 377.685221][T10290] 3 locks held by syz.3.1765/10290: [ 377.690397][T10290] #0: ffff88805a9500e0 (&type->s_umount_key#59/1){+.+.}-{3:3}, at: alloc_super+0x210/0x940 [ 377.700475][T10290] #1: ffff8880779a2198 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_fill_super+0x1378/0x1c90 [ 377.710589][T10290] #2: ffff888079c940b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0 [ 377.720486][T10290] [ 377.720486][T10290] stack backtrace: [ 377.726350][T10290] CPU: 1 PID: 10290 Comm: syz.3.1765 Not tainted 5.15.164-syzkaller #0 [ 377.734561][T10290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 377.744592][T10290] Call Trace: [ 377.747850][T10290] [ 377.750760][T10290] dump_stack_lvl+0x1e3/0x2d0 [ 377.755415][T10290] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 377.761026][T10290] ? print_circular_bug+0x12b/0x1a0 [ 377.766203][T10290] check_noncircular+0x2f8/0x3b0 [ 377.771118][T10290] ? add_chain_block+0x850/0x850 [ 377.776033][T10290] ? lockdep_lock+0x11f/0x2a0 [ 377.780687][T10290] ? _find_first_zero_bit+0xcf/0xf0 [ 377.785861][T10290] validate_chain+0x1649/0x5930 [ 377.790691][T10290] ? reacquire_held_locks+0x660/0x660 [ 377.796041][T10290] ? reacquire_held_locks+0x660/0x660 [ 377.801398][T10290] ? reacquire_held_locks+0x660/0x660 [ 377.806747][T10290] ? __lock_acquire+0x1295/0x1ff0 [ 377.811834][T10290] ? mark_lock+0x98/0x340 [ 377.816142][T10290] ? look_up_lock_class+0x77/0x120 [ 377.821233][T10290] ? register_lock_class+0x100/0x9a0 [ 377.826496][T10290] ? is_dynamic_key+0x1f0/0x1f0 [ 377.831321][T10290] ? mark_lock+0x98/0x340 [ 377.835624][T10290] __lock_acquire+0x1295/0x1ff0 [ 377.840482][T10290] lock_acquire+0x1db/0x4f0 [ 377.845047][T10290] ? hfsplus_file_extend+0x1d2/0x1b10 [ 377.850401][T10290] ? read_lock_is_recursive+0x10/0x10 [ 377.855748][T10290] ? __might_sleep+0xc0/0xc0 [ 377.860316][T10290] ? is_bpf_text_address+0x24f/0x260 [ 377.865578][T10290] ? stack_trace_save+0x1c0/0x1c0 [ 377.870577][T10290] ? __kernel_text_address+0x94/0x100 [ 377.875930][T10290] ? unwind_get_return_address+0x49/0x80 [ 377.881540][T10290] __mutex_lock_common+0x1da/0x25a0 [ 377.886716][T10290] ? hfsplus_file_extend+0x1d2/0x1b10 [ 377.892072][T10290] ? hfsplus_file_extend+0x1d2/0x1b10 [ 377.897421][T10290] ? mutex_lock_io_nested+0x60/0x60 [ 377.902596][T10290] ? read_lock_is_recursive+0x10/0x10 [ 377.907944][T10290] mutex_lock_nested+0x17/0x20 [ 377.912683][T10290] hfsplus_file_extend+0x1d2/0x1b10 [ 377.917864][T10290] ? hfsplus_get_block+0x14e0/0x14e0 [ 377.923129][T10290] ? __mutex_lock_common+0x444/0x25a0 [ 377.928481][T10290] ? hfsplus_find_init+0x146/0x1c0 [ 377.933567][T10290] ? mutex_lock_io_nested+0x60/0x60 [ 377.938744][T10290] hfsplus_bmap_reserve+0x101/0x4e0 [ 377.943926][T10290] hfsplus_create_cat+0x1a9/0x1ba0 [ 377.949010][T10290] ? look_up_lock_class+0x77/0x120 [ 377.954102][T10290] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 377.959538][T10290] ? hfsplus_find_cat+0x5c0/0x5c0 [ 377.964533][T10290] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 377.970403][T10290] ? enqueue_timer+0x233/0x540 [ 377.975160][T10290] ? do_raw_spin_unlock+0x137/0x8b0 [ 377.980337][T10290] ? _raw_spin_unlock+0x24/0x40 [ 377.985163][T10290] ? hfsplus_new_inode+0x5c9/0x740 [ 377.990251][T10290] hfsplus_fill_super+0x13e6/0x1c90 [ 377.995429][T10290] ? hfsplus_mount+0x40/0x40 [ 378.000011][T10290] ? snprintf+0xd6/0x120 [ 378.004234][T10290] ? vscnprintf+0x80/0x80 [ 378.008539][T10290] ? set_blocksize+0x1ec/0x370 [ 378.013284][T10290] mount_bdev+0x2c9/0x3f0 [ 378.017588][T10290] ? hfsplus_mount+0x40/0x40 [ 378.022155][T10290] legacy_get_tree+0xeb/0x180 [ 378.026810][T10290] ? hfsplus_mark_mdb_dirty+0x1b0/0x1b0 [ 378.032333][T10290] vfs_get_tree+0x88/0x270 [ 378.036725][T10290] do_new_mount+0x2ba/0xb40 [ 378.041205][T10290] ? do_move_mount_old+0x160/0x160 [ 378.046291][T10290] ? user_path_at_empty+0x12b/0x180 [ 378.051466][T10290] __se_sys_mount+0x2d5/0x3c0 [ 378.056122][T10290] ? __x64_sys_mount+0xc0/0xc0 [ 378.060862][T10290] ? syscall_enter_from_user_mode+0x2e/0x240 [ 378.066822][T10290] ? lockdep_hardirqs_on+0x94/0x130 [ 378.071995][T10290] ? __x64_sys_mount+0x1c/0xc0 [ 378.076736][T10290] do_syscall_64+0x3b/0xb0 [ 378.081128][T10290] ? clear_bhb_loop+0x15/0x70 [ 378.085784][T10290] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 378.091661][T10290] RIP: 0033:0x7f8a8a3be0fa [ 378.096142][T10290] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.115725][T10290] RSP: 002b:00007f8a88838e68 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 378.124116][T10290] RAX: ffffffffffffffda RBX: 00007f8a88838ef0 RCX: 00007f8a8a3be0fa [ 378.132069][T10290] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007f8a88838eb0 [ 378.140017][T10290] RBP: 0000000020000000 R08: 00007f8a88838ef0 R09: 0000000002000010 [ 378.147965][T10290] R10: 0000000002000010 R11: 0000000000000202 R12: 0000000020000080 [ 378.155910][T10290] R13: 00007f8a88838eb0 R14: 00000000000006af R15: 0000000020000100 [ 378.163865][T10290] [ 378.335745][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.342287][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.792874][ T1228] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.844312][ T1228] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.911183][ T1228] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.952291][ T1228] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.028074][ T1228] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.074484][ T1228] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.125387][ T1228] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.173150][ T1228] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.134523][ T1228] device hsr_slave_0 left promiscuous mode [ 380.141188][ T1228] device hsr_slave_1 left promiscuous mode [ 380.147368][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.155403][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.162899][ T1228] device bridge_slave_1 left promiscuous mode [ 380.169000][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.177057][ T1228] device bridge_slave_0 left promiscuous mode [ 380.183324][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.193665][ T1228] device hsr_slave_0 left promiscuous mode [ 380.199752][ T1228] device hsr_slave_1 left promiscuous mode [ 380.205798][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.213244][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.221181][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.228616][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.236103][ T1228] device bridge_slave_1 left promiscuous mode [ 380.242523][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.251783][ T1228] device bridge_slave_0 left promiscuous mode [ 380.257933][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.269951][ T1228] device hsr_slave_0 left promiscuous mode [ 380.275992][ T1228] device hsr_slave_1 left promiscuous mode [ 380.282286][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.289782][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.297143][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.304786][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.312372][ T1228] device bridge_slave_1 left promiscuous mode [ 380.318464][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.326575][ T1228] device bridge_slave_0 left promiscuous mode [ 380.332890][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.343693][ T1228] device veth1_macvtap left promiscuous mode [ 380.349786][ T1228] device veth0_macvtap left promiscuous mode [ 380.355771][ T1228] device veth1_vlan left promiscuous mode [ 380.361547][ T1228] device veth0_vlan left promiscuous mode [ 380.367638][ T1228] device veth1_macvtap left promiscuous mode [ 380.373798][ T1228] device veth0_macvtap left promiscuous mode [ 380.379929][ T1228] device veth1_vlan left promiscuous mode [ 380.385667][ T1228] device veth0_vlan left promiscuous mode [ 380.480797][ T1228] team0 (unregistering): Port device team_slave_1 removed [ 380.492241][ T1228] team0 (unregistering): Port device team_slave_0 removed [ 380.501968][ T1228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.513683][ T1228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.550539][ T1228] bond0 (unregistering): Released all slaves [ 380.639765][ T1228] team0 (unregistering): Port device team_slave_1 removed [ 380.649432][ T1228] team0 (unregistering): Port device team_slave_0 removed [ 380.658697][ T1228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.672423][ T1228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.708862][ T1228] bond0 (unregistering): Released all slaves [ 380.771110][ T1228] team0 (unregistering): Port device team_slave_1 removed [ 380.781230][ T1228] team0 (unregistering): Port device team_slave_0 removed [ 380.791067][ T1228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.802908][ T1228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.843445][ T1228] bond0 (unregistering): Released all slaves [ 381.948099][ T1228] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.012956][ T1228] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.052568][ T1228] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.111551][ T1228] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.188447][ T1228] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.213550][ T1228] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.262571][ T1228] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.315090][ T1228] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.375422][ T1228] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.423180][ T1228] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.472432][ T1228] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.523387][ T1228] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.978495][ T1228] device erspan0 left promiscuous mode [ 382.985284][ T1228] bridge0: port 3(erspan0) entered disabled state [ 383.151206][ T1228] IPVS: stopping backup sync thread 9485 ... [ 383.482845][ T1228] device hsr_slave_0 left promiscuous mode [ 383.489226][ T1228] device hsr_slave_1 left promiscuous mode [ 383.495424][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.503189][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.510874][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.518372][ T1228] device bridge_slave_1 left promiscuous mode [ 383.526173][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.537905][ T1228] device bridge_slave_0 left promiscuous mode [ 383.545136][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.556846][ T1228] device hsr_slave_0 left promiscuous mode [ 383.564098][ T1228] device hsr_slave_1 left promiscuous mode [ 383.571006][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.578387][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.587248][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.595142][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.603998][ T1228] device bridge_slave_1 left promiscuous mode [ 383.610953][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.618605][ T1228] device bridge_slave_0 left promiscuous mode [ 383.624932][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.635446][ T1228] device hsr_slave_0 left promiscuous mode [ 383.641586][ T1228] device hsr_slave_1 left promiscuous mode [ 383.647659][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.655655][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.663125][ T1228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.670594][ T1228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.677914][ T1228] device bridge_slave_1 left promiscuous mode [ 383.684066][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.691822][ T1228] device bridge_slave_0 left promiscuous mode [ 383.697929][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.708410][ T1228] device veth1_macvtap left promiscuous mode [ 383.714554][ T1228] device veth0_macvtap left promiscuous mode [ 383.720626][ T1228] device veth1_vlan left promiscuous mode [ 383.726371][ T1228] device veth0_vlan left promiscuous mode [ 383.732577][ T1228] device veth1_macvtap left promiscuous mode [ 383.738643][ T1228] device veth0_macvtap left promiscuous mode [ 383.744918][ T1228] device veth1_vlan left promiscuous mode [ 383.751253][ T1228] device veth0_vlan left promiscuous mode [ 383.757299][ T1228] device veth1_macvtap left promiscuous mode [ 383.763600][ T1228] device veth0_macvtap left promiscuous mode [ 383.769695][ T1228] device veth1_vlan left promiscuous mode [ 383.775430][ T1228] device veth0_vlan left promiscuous mode [ 383.913326][ T1228] team0 (unregistering): Port device team_slave_1 removed [ 383.924320][ T1228] team0 (unregistering): Port device team_slave_0 removed [ 383.933563][ T1228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.944566][ T1228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.983983][ T1228] bond0 (unregistering): Released all slaves [ 384.057513][ T1228] team0 (unregistering): Port device team_slave_1 removed [ 384.066768][ T1228] team0 (unregistering): Port device team_slave_0 removed [ 384.077910][ T1228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.089099][ T1228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.124283][ T1228] bond0 (unregistering): Released all slaves [ 384.210887][ T1228] team0 (unregistering): Port device team_slave_1 removed [ 384.220938][ T1228] team0 (unregistering): Port device team_slave_0 removed [ 384.231128][ T1228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.242659][ T1228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.276924][ T1228] bond0 (unregistering): Released all slaves